AMENDMENTS IN THE CLAIMS 
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L (presently amended) A method for enforcing an authority-designated access policy, said 
method comprising the steps of: 

receiving a plurality of authority-designated settings associated with a particular user in a 
particular transmittable data format at a particular authority-enabled system from among a 
plurality of authority-enabled systems, wherein said plurality of authority-designated settings 
designate levels of access to particular types of content as determined by a plurality of authorities 
to said particular user; 

only allowing access for said particular user to a selection of a plurality of types of 
content provided by said particular authority-enabled system that are enabled according to said 
authority-designated settings received at said particular authority-enabled system, such that said 
particular authority-enabled system enforces an authority-designated access policy for a 
particular user at said particular authority-enabled system from among a plurality of authority- 
enabled system; 

receiving a request for access to a particular type of content at said authority-enabled 
system from said particular user; 

determining whether or not said particular type of content is included within said 
selection of said plurality of types of content; and 

transmitting a record of authorization from said particular authority-enabled system to a 
portable data storage medium associated with said particular user, in response to determining that 
said particular type of content is included within said selection of said particular types of content . 



2. (original) The method for enforcing an authority-designated access policy according 
to claim 1, said method further comprising the step of: 

transmitting a description of said selection of said plurality of types of content to a 
computer system to output said selection of said plurality of types of content to said particular 
user via an output interface controlled by said computer system. 

3. (original) The method for enforcing an authority-designated access policy according 
to claim 1, said method further comprising the steps of: 
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comparing said plurality of authority-designated settings received at said particular 
authority-enabled system with a plurality of advertisements at said particular authority-enabled 
system; and 

controlling output of an authority-enabled selection of said plurality of advertisements to 
a plurality of output interfaces controlled by said particular authority-enabled system. 

4. (original) The method for enforcing an authority-designated access policy according 
to claim 1, said method further comprising the steps of: 

designating specialized staff instructions at said particular authority-enabled device 
according to said plurality of authority-designated settings; and 

controlling output of said specialized staff instructions to an output interface controlled 
by said particular authority-enabled system that is accessible to a staff member. 

5. (canceled) 

6. (original) The method for enforcing an authority-designated access policy according 
to claim 5, said method further comprising the step of: 

transmitting a record of denial of authorization from said particular authority-enabled 
system to said portable data storage medium, in response to determining that said particular type 
of content is not included within said selection of said particular types of content. 

7. (original) The method for enforcing an authority-designated access policy according 
to claim 5, said method further comprising the step of: 

transmitting an authorization for access to a check-point for accessing said particular type 
of content, in response to determining that said particular type of content is included within said 
selection of said particular types of content. 

8. (original) The method for enforcing an authority-designated access policy according 
to claim 1, said method further comprising the steps of: 
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receiving a selection of a plurality of user-designated preferences at said particular 
authority-enabled system, wherein said user-designated preferences are set by said particular 
user; and 

filtering said selection of said plurality of types of content at said particular authority- 
enabled processing system according to said plurality of user-designated preferences. 

9. (original) The method for enforcing an authority-designated access policy according 
to claim 1, said step of only allowing access for said particular user to a selection of said 
plurality of types of content that are enabled according to said authority-designated settings 
received at said particular authority-enabled system further comprising the step of: 

only allowing access for said particular user to a selection of visual content that is 
accessible via said particular authority-enabled system. 

10. (original) The method for enforcing an authority-designated access policy according 
to claim 1, said step of only allowing access for said particular user to a selection of said 
plurality of types of content that are enabled according to said authority-designated settings 
received at said particular authority-enabled system further comprising the step of: 

only allowing access for said particular user to a selection of audio content that is 
accessible via said particular authority-enabled system. 

11. (original) The method for enforcing an authority-designated access policy according 
to claim 1, said step of only allowing access for said particular user to a selection of said 
plurality of types of content that are enabled according to said authority-designated settings 
received at said particular authority-enabled system further comprising the step of: 

only allowing access for said particular user to a selection of products that are accessible 
via said particular authority-enabled system. 

12. (original) The method for enforcing an authority-designated access policy according 
to claim 1, said step of only allowing access for said particular user to a selection of said 
plurality of types of content that are enabled according to said authority-designated settings 
received at said particular authority-enabled system further comprising the step of: 
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only allowing access for said particular user to a particular physical location that is 
accessible via said particular authority-enabled system. 

13. (original) The method for enforcing an authority-designated access policy according 
to claim 1, said step of only allowing access for said particular user to a selection of said 
plurality of types of content that are enabled according to said authority-designated settings 
received at said particular authority-enabled system further comprising the step of: 

only allowing access for said particular user to a selection of services that are accessible 
via said particular authority-enabled system. 

14. (original) The method for enforcing an authority-designated access policy according 
to claim 1, said step of receiving a plurality of authority-designated settings associated with a 
particular user, further comprising the step of: 

receiving said plurality of authority-designated settings associated with a particular user 
from a portable data storage medium associated with said particular user. 

15. (original) The method for enforcing an authority-designated access policy according 
to claim 14, wherein said portable data storage medium further comprises a portable computer 
system. 

16. (original) The method for enforcing an authority-designated access policy according 
to claim 14, wherein said portable data storage medium further comprises a smart card. 

17. (original) The method for enforcing an authority-designated access policy according 
to claim 1, said step of receiving a plurality of authority-designated settings associated with a 
particular user, further comprising the step of: 

receiving said plurality of authority-designated settings in an extensible mark-up 
language data format. 
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18. (presently amended) A system for enforcing an authority-designated access policy, said 
system comprising: 

means for receiving a plurality of authority-designated settings associated with a 
particular user in a particular transmittable data format at a particular authority-enabled system 
from among a plurality of authority-enabled systems, wherein said plurality of authority- 
designated settings designate levels of access to particular types of content as determined by a 
plurality of authorities to said particular user; 

means for only allowing access for said particular user to a selection of a plurality of 
types of content provided by said particular authority-enabled system that are enabled according 
to said authority-designated settings received at said particular authority-enabled system, such 
that said particular authority-enabled system enforces an authority-designated access policy for a 
particular user at said particular authority-enabled system from among a plurality of authority- 
enabled system; 

means for receiving a request for access to a particular type of content at said authority- 
enabled system from said particular user; 

means for determining whether or not said particular type of content is included within 
said selection of said plurality of types of content; and 

means for transmitting a record of authorization from said particular authority-enabled 
system to a portable data storage medium associated with said particular user, in response to 
determining that said particular type of content is included within said selection of said particular 
types of content . 

19. (original) The system for enforcing an authority-designated access policy according 
to claim 18, said system further comprising: 

means for transmitting a description of said selection of said plurality of types of content 
to a computer system to output said selection of said plurality of types of content to said 
particular user via an output interface controlled by said computer system. 

20. (original) The system for enforcing an authority-designated access policy according 
to claim 18, said system further comprising: 
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means for comparing said plurality of authority-designated settings received at said 
particular authority-enabled system with a plurality of advertisements at said particular authority- 
enabled system; and 

means for controlling output of an authority-enabled selection of said plurality of 
advertisements to a plurality of output interfaces controlled by said particular authority-enabled 
system. 

21. (original) The system for enforcing an authority-designated access policy according 
to claim 18, said system further comprising: 

means for designating specialized staff instructions at said particular authority-enabled 
device according to said plurality of authority-designated settings; and 

means for controlling output of said specialized staff instructions to an output interface 
controlled by said particular authority-enabled system that is accessible to a staff member. 

22. (canceled) 

23. (original) The system for enforcing an authority-designated access policy according 
to claim 22, said system further comprising: 

means for transmitting a record of denial of authorization from said particular authority- 
enabled system to said portable data storage medium, in response to determining that said 
particular type of content is not included within said selection of said particular types of content. 

24. (original) The system for enforcing an authority-designated access policy according 
to claim 22, said system further comprising: 

means for transmitting an authorization for access to a check-point for accessing said 
particular type of content, in response to determining that said particular type of content is 
included within said selection of said particular types of content. 

25. (original) The system for enforcing an authority-designated access policy according 
to claim 18, said system further comprising: 
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means for receiving a selection of a plurality of user-designated preferences at said 
particular authority-enabled system, wherein said user-designated preferences are set by said 
particular user; and 

means for filtering said selection of said plurality of types of content at said particular 
authority-enabled processing system according to said plurality of user-designated preferences. 

26. (original) The system for enforcing an authority-designated access policy according 
to claim 18, said means for only allowing access for said particular user to a selection of said 
plurality of types of content that are enabled according to said authority-designated settings 
received at said particular authority-enabled system further comprising: 

means for only allowing access for said particular user to a selection of visual content 
that is accessible via said particular authority-enabled system. 

27. (original) The system for enforcing an authority-designated access policy according 
to claim 18, said means for only allowing access for said particular user to a selection of said 
plurality of types of content that are enabled according to said authority-designated settings 
received at said particular authority-enabled system further comprising: 

means for only allowing access for said particular user to a selection of audio content that 
is accessible via said particular authority-enabled system. 

28. (original) The system for enforcing an authority-designated access policy according 
to claim 18, said means for only allowing access for said particular user to a selection of said 
plurality of types of content that are enabled according to said authority-designated settings 
received at said particular authority-enabled system further comprising: 

means for only allowing access for said particular user to a selection of products that are 
accessible via said particular authority-enabled system. 

29. (original) The system for enforcing an authority-designated access policy according 
to claim 18, said means for only allowing access for said particular user to a selection of said 
plurality of types of content that are enabled according to said authority-designated settings 
received at said particular authority-enabled system further comprising: 
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means for only allowing access for said particular user to a particular physical location 
that is accessible via said particular authority-enabled system. 

30. (original) The system for enforcing an authority-designated access policy according 
to claim 18, said means for only allowing access for said particular user to a selection of said 
plurality of types of content that are enabled according to said authority-designated settings 
received at said particular authority-enabled system further comprising: 

means for only allowing access for said particular user to a selection of services that are 
accessible via said particular authority-enabled system. 

3 1 . (original) The system for enforcing an authority-designated access policy according 
to claim 18, said means for receiving a plurality of authority-designated settings associated with 
a particular user, further comprising: 

means for receiving said plurality of authority-designated settings associated with a 
particular user from a portable data storage medium associated with said particular user. 

32. (original) The system for enforcing an authority-designated access policy according 
to claim 31, wherein said portable data storage medium further comprises a portable computer 
system. 

33. (original) The system for enforcing an authority-designated access policy according 
to claim 31, wherein said portable data storage medium further comprises a smart card. 

34. (original) The system for enforcing an authority-designated access policy according 
to claim 18, said means for receiving a plurality of authority-designated settings associated with 
a particular user, further comprising: 

means for receiving said plurality of authority-designated settings in an extensible mark- 
up language data format. 
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35. (original) A program for enforcing an authority-designated access policy, residing 
on a computer usable medium having computer readable program code means, said program 
comprising: 

means for receiving a plurality of authority-designated settings associated with a 
particular user in a particular transmittable data format at a particular authority-enabled system 
from among a plurality of authority-enabled systems, wherein said plurality of authority- 
designated settings designate levels of access to particular types of content as determined by a 
plurality of authorities to said particular user; 

means for only allowing access for said particular user to a selection of a plurality of 
types of content provided by said particular authority-enabled system that are enabled according 
to said authority-designated settings received at said particular authority-enabled system, such 
that said particular authority-enabled system enforces an authority-designated access policy for a 
particular user at said particular authority-enabled system from among a plurality of authority- 
enabled system; 

means for receiving a request for a access to a particular type of content at said authority- 
enabled system from said particular user; 

means for determining whether or not said particular type of content is included within 
said selection of said plurality of types of content; and 

means for transmitting a record of authorization from said particular authority-enabled 
system to a portable data storage medium associated with said particular user, in response to 
determining that said particular type of content is included within said selection of said particular 
types of content . 

36. (original) The program for enforcing an authority-designated access policy 
according to claim 35, said program further comprising: 

means for transmitting a description of said selection of said plurality of types of content 
to a computer system to output said selection of said plurality of types of content to said 
particular user via an output interface controlled by said computer system. 

37. (original) The program for enforcing an authority-designated access policy 
according to claim 35, said program further comprising: 
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means for comparing said plurality of authority-designated settings received at said 
particular authority-enabled system with a plurality of advertisements at said particular authority- 
enabled system; and 

means for controlling output of an authority-enabled selection of said plurality of 
advertisements to a plurality of output interfaces controlled by said particular authority-enabled 
system. 

38. (original) The program for enforcing an authority-designated access policy 
according to claim 35, said program further comprising: 

means for designating specialized staff instructions at said particular authority-enabled 
device according to said plurality of authority-designated settings; and 

means for controlling output of said specialized staff instructions to an output interface 
controlled by said particular authority-enabled system that is accessible to a staff member. 

39. (canceled) 



AUS000032US1 



-13- 




40. (presently amended) A method for managing access to content by a user, said method 
comprising the steps of: 

receiving entries for a plurality of authority-designated settings from a plurality of 
allowable authorities to said particular user at a portable data storage medium associated with 
said particular user, wherein said plurality of authority-designated settings designate levels of 
access to particular types of content; 

transmitting said plurality of authority-designated settings from said portable data storage 
medium to a plurality of authority-enabled systems, wherein each of said plurality of authority- 
enabled systems controls access to at least one type of content; 

receiving and storing at said portable data storage medium an indication of authorization 
for said particular user to said at least one type of content controlled by one of said plurality of 
authority-enabled systems, such that authorization for content to said particular user is monitored 
at said portable data storage medium; 

comparing a particular authority from whom an entry for an authority-designated setting 
is received with said plurality of allowable authorities designated at said portable data storage 
medium; and 

only storing said entry for said authority-designated setting at said portable data storage 
medium, in response to authorization of said particular authority in said plurality of allowable 
authorities . 

41. (canceled) 

42. (original) The method for managing access to content by a user according to claim 
40, said step of receiving entries for a plurality of authority-designated settings from a plurality 
of allowable authorities to said particular user at a portable data storage medium associated with 
said particular user, further comprising the steps of: 

transmitting a request for access to a particular type of content from a portable computer 
system comprising said portable data storage medium to a remote computer system accessible to 
one of said plurality of allowable authorities; and 
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receiving an entry for a one-time access to said particular type of content from said 
remote computer system by said one of said plurality of allowable authorities at said portable 
computer system. 

43 . (Amended) Th e m e thod for managing acc e ss to cont e nt by a us e r according to claim 
4 0, said st e p of transmitting said plurality of authority d e signat e d s e ttings from said portabl e data 
storag e m e dium to a plurality of authority e nabl e d syst e ms, furth e r comprising th e step of: 

A method for managing access to content by a user, said method comprising the steps of: 

receiving entries for a plurality of authority-designated settings from a plurality of 
allowable authorities to said particular user at a portable data storage medium associated with 
said particular user, wherein said plurality of authority-designated settings designate levels of 
access to particular types of content; 

transmitting said plurality of authority-designated settings from said portable data storage 
medium to a plurality of authority-enabled systems, wherein each of said plurality of authority- 
enabled systems controls access to at least one type of content; 

receiving and storing at said portable data storage medium an indication of authorization for said 
particular user to said at least one type of content controlled by one of said plurality of authority- 
enabled systems, such that authorization for content to said particular user is monitored at said 
portable data storage medium; and 

encrypting said plurality of authority-designated settings at a portable computer system 
comprising said portable data storage medium such that only a particular selection from among 
said plurality of authority-enabled systems are enabled to read said plurality of authority- 
designated settings. 

44. (Amended) Th e m e thod for managing acc e ss to cont e nt by a us e r according to claim 
4 0, said st e p of transmitting said plurality of authority d e signat e d s e ttings from said portabl e data 
storag e m e dium to a plurality of authority e nabl e d syst e ms, furth e r comprising th e st e p of: 

A method for managing access to content by a user, said method comprising the steps of: 

receiving entries for a plurality of authority-designated settings from a plurality of 
allowable authorities to said particular user at a portable data storage medium associated with 
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said particular user, wherein said plurality of authority-designated settings designate levels of 
access to particular types of content; 

transmitting said plurality of authority-designated settings from said portable data storage 
medium to a plurality of authority-enabled systems, wherein each of said plurality of authority- 
enabled systems controls access to at least one type of content; 

receiving and storing at said portable data storage medium an indication of authorization for said 
particular user to said at least one type of content controlled by one of said plurality of authority- 
enabled systems, such that authorization for content to said particular user is monitored at said 
portable data storage medium; and 

filtering said plurality of authority-designated settings at a portable computer system 
comprising said portable data storage medium such that only a filtered selection from among said 
plurality of authority-designated settings are transmittable to said plurality of authority-enabled 
systems. 
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45. (original) The method for managing access to content by a user according to claim 
40, said step of receiving and storing at said portable data storage medium an indication of 
authorization for said particular user to said at least one type of content controlled by one of said 
plurality of authority-enabled systems, 

receiving said indication of authorization that indicates said particular user was allowed 
access to said at least one type of content controlled by said one of said plurality of authority- 
enabled systems. 

46. (original) The method for managing access to content by a user according to claim 
40, said step of receiving and storing at said portable data storage medium an indication of 
authorization for said particular user to said at least one type of content controlled by one of said 
plurality of authority-enabled systems, 

receiving said indication of authorization that indicates said particular user was denied 
access to said at least one type of content controlled by said one of said plurality of authority- 
enabled systems. 

47. (original) The method for managing access to content by a user according to claim 
40, said method further comprising the steps of: 

filtering said data stored at said portable data storage medium by a portable computer 
system according to said plurality of authority-designated settings, in response to receiving a 
request for data stored at said portable data storage medium from a particular authority from 
among said plurality of allowable authorities; and 

only allowing said particular authority to access said filtered data according to access 
privileges provided to said particular authority. 

48. (Amended) Th e m e thod for managing acc e ss to cont e nt by a us e r according to claim 
40, said m e thod furth e r comprising th e st e ps of: 

A method for managing access to content by a user, said method comprising the steps of: 

receiving entries for a plurality of authority-designated settings from a plurality of 
allowable authorities to said particular user at a portable data storage medium associated with 



said particular user, wherein said plurality of authority-designated settings designate levels of 
access to particular types of content; 

transmitting said plurality of authority-designated settings from said portable data storage 
medium to a plurality of authority-enabled systems, wherein each of said plurality of authority- 
enabled systems controls access to at least one type of content; 

receiving and storing at said portable data storage medium an indication of authorization 
for said particular user to said at least one type of content controlled by one of said plurality of 
authority-enabled systems, such that authorization for content to said particular user is monitored 
at said portable data storage medium; 

receiving a plurality of user-designated preferences by said particular user at said portable 
data storage medium; and 

transmitting said plurality of user-designated preferences with said plurality of authority- 
designated preferences to said plurality of authority-enabled systems. 

49. (original) The method for managing access to content by a user according to claim 
40, said method further comprising the steps of: 

receiving a selection of a plurality of products that are enabled for access by said 
particular user via said authority-enabled system according to said authority-designated settings. 

50. (original) The method for managing access to content by a user according to claim 
40, said method further comprising the steps of: 

receiving a selection of a plurality of media that are enabled for access by said particular 
user via said authority-enabled system according to said authority-designated settings. 

51. (original) The method for managing access to content by a user according to claim 
40, said method further comprising the steps of: 

receiving a selection of a plurality of services that are enabled for access by said 
particular user via said authority-enabled system according to said authority-designated settings. 
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52. (presently amended) A system for managing access to content by a user, said system 
comprising: 

means for receiving entries for a plurality of authority-designated settings from a plurality 
of allowable authorities to said particular user at a portable data storage medium associated with 
said particular user, wherein said plurality of authority-designated settings designate levels of 
access to particular types of content; 

means for transmitting said plurality of authority-designated settings from said portable 
data storage medium to a plurality of authority-enabled systems, wherein each of said plurality of 
authority-enabled systems controls access to at least one type of content; 

means for receiving and storing at said portable data storage medium an indication of 
authorization for said particular user to said at least one type of content controlled by one of said 
plurality of authority-enabled systems, such that authorization for content to said particular user 
is monitored at said portable data storage medium; 

means for comparing a particular authority from whom an entry for an authority- 
designated setting is received with said plurality of allowable authorities designated at said 
portable data storage medium; and 

means for only storing said entry for said authority-designated setting at said portable 
data storage medium, in response to authorization of said particular authority in said plurality of 
allowable authorities . 

53. (canceled) 

54. (original) The system for managing access to content by a user according to claim 
52, said means for receiving entries for a plurality of authority-designated settings from a 
plurality of allowable authorities to said particular user at a portable data storage medium 
associated with said particular user, further comprising: 

means for transmitting a request for access to a particular type of content from a portable 
computer system comprising said portable data storage medium to a remote computer system 
accessible to one of said plurality of allowable authorities; and 



AUS000032US1 



- 19- 



• 



means for receiving an entry for a one-time access to said particular type of content from 
said remote computer system by said one of said plurality of allowable authorities at said 
portable computer system. 

55. (original) The system for managing access to content by a user according to claim 
52, said means for transmitting said plurality of authority-designated settings from said portable 
data storage medium to a plurality of authority-enabled systems, further comprising: 

means for encrypting said plurality of authority-designated settings at a portable 
computer system comprising said portable data storage medium such that only a particular 
selection from among said plurality of authority-enabled systems are enabled to read said 
plurality of authority-designated settings. 

56. (original) The system for managing access to content by a user according to claim 
52, said means for transmitting said plurality of authority-designated settings from said portable 
data storage medium to a plurality of authority-enabled systems, further comprising: 

means for filtering said plurality of authority-designated settings at a portable computer 
system comprising said portable data storage medium such that only a filtered selection from 
among said plurality of authority-designated settings are transmittable to said plurality of 
authority-enabled systems. 

57. (original) The system for managing access to content by a user according to claim 
52, said means for receiving and storing at said portable data storage medium an indication of 
authorization for said particular user to said at least one type of content controlled by one of said 
plurality of authority-enabled systems, 

means for receiving said indication of authorization that indicates said particular user was 
allowed access to said at least one type of content controlled by said one of said plurality of 
authority-enabled systems. 

58. (original) The system for managing access to content by a user according to claim 
52, said means for receiving and storing at said portable data storage medium an indication of 
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authorization for said particular user to said at least one type of content controlled by one of said 
plurality of authority-enabled systems, 

means for receiving said indication of authorization that indicates said particular user was 
denied access to said at least one type of content controlled by said one of said plurality of 
authority-enabled systems. 

59. (original) The system for managing access to content by a user according to claim 
52, said system further comprising: 

means for filtering said data stored at said portable data storage medium by a portable 
computer system according to said plurality of authority-designated settings, in response to 
receiving a request for data stored at said portable data storage medium from a particular 
authority from among said plurality of allowable authorities; and 

means for only allowing said particular authority to access said filtered data according to 
access privileges provided to said particular authority. 

60. (original) The system for managing access to content by a user according to claim 
52, said system further comprising: 

means for receiving a plurality of user-designated preferences by said particular user at 
said portable data storage medium; and 

means for transmitting said plurality of user-designated preferences with said plurality of 
authority-designated preferences to said plurality of authority-enabled systems. 

61. (original) The system for managing access to content by a user according to claim 
52, said system further comprising: 

means for receiving a selection of a plurality of products that are enabled for access by 
said particular user via said authority-enabled system according to said authority-designated 
settings. 

62. (original) The system for managing access to content by a user according to claim 
52, said system further comprising: 



AUS000032US1 



-21 - 




means for receiving a selection of a plurality of media that are enabled for access by said 
particular user via said authority-enabled system according to said authority-designated settings. 

63. (original) The system for managing access to content by a user according to claim 
52, said system further comprising: 

means for receiving a selection of a plurality of services that are enabled for access by said 
particular user via said authority-enabled system according to said authority-designated settings. 
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